feat: standalone check-order page, backup drives page, nav links, cookies, confirmed-order delete guard

server.py

@@ -371,6 +371,13 @@ def delete_submission(email: str = "", phone: str = ""):
         db.close()
         raise HTTPException(404, "No submission found with that email and phone")
     sub_id = rows[0]["id"]
+    # Get current status
+    sub = db.execute("SELECT status FROM submissions WHERE id = ?", (sub_id,)).fetchone()
+    if sub:
+        status_idx = STATUSES.index(sub["status"]) if sub["status"] in STATUSES else 0
+        if status_idx >= STATUSES.index("confirmed"):
+            db.close()
+            raise HTTPException(400, "This order has already been confirmed and can no longer be deleted. Contact us via WhatsApp or Telegram.")
     db.execute("DELETE FROM submission_tags WHERE submission_id = ?", (sub_id,))
     db.execute("DELETE FROM reply_drafts WHERE submission_id = ?", (sub_id,))
     db.execute("DELETE FROM submission_data WHERE submission_id = ?", (sub_id,))